IT Risk & Controls Lead – Third Party Risk Management

Job Title : L2 Operations Lead – Identity & Access Management (IDAM)

Experience : 5+ Years

Location : Gurugram Sector 59, Haryana

Work Mode : Hybrid

Support Level : L2 Operations

Domain : Identity & Access Management (IDAM)

Job Summary :

We are looking for an experienced L2 Operations Lead – IDAM to manage and support enterprise Identity and Access Management services. The ideal candidate should have hands-on experience with Azure AD (Microsoft Entra ID), Active Directory, Okta, CyberArk, access provisioning, and ITSM processes.

The role involves handling L1 / L2 escalations, troubleshooting identity and access issues, supporting privileged access management, maintaining operational documentation, participating in incident reviews, and coordinating with L3 engineering and other infrastructure teams to ensure service stability and security.

Mandatory Skills : IDAM, IAM, L2 Operations, Azure AD, Microsoft Entra ID, Active Directory, Okta, CyberArk, PAM, SSO, MFA, Access Provisioning, PowerShell, ServiceNow, Incident Management, ITIL, Identity Governance.

Key Responsibilities :

• Provide L1 / L2 operational support for Identity and Access Management services in an enterprise environment.
• Manage end-to-end incident resolution, from L1 / L1.5 escalation through investigation, resolution, and closure.
• Administer user access provisioning, modification, de-provisioning, and application access requests.
• Troubleshoot Azure AD, Active Directory, Okta, SSO, MFA, authentication, authorization, and access-related issues.
• Support CyberArk operations, privileged access management (PAM), and access control processes.
• Investigate directory service misconfigurations, access failures, and identity-related connectivity or routing issues.
• Maintain accurate ServiceNow tickets with clear investigation details, resolution steps, and closure notes.
• Participate in Major Incident Management (MIM) calls and assess whether incidents meet major incident criteria.
• Support root cause analysis (RCA), problem management, and change management activities.
• Maintain and update standard operating procedures (SOPs), knowledge-base articles, and operational documentation.
• Perform or coordinate backup and restoration of IAM service configurations, as applicable.
• Prepare periodic and on-demand operational reports, analyze incident trends, and present service performance updates.
• Lead or facilitate monthly service review meetings and participate in weekly engineering calls.
• Coordinate with Hosting, Network Security, DLP, Malware Protection, and other infrastructure teams to resolve cross-functional issues.
• Coordinate with relevant vendors for break-fix support and replacement of applicable infrastructure components.
• Support access-request certification and validation activities as part of Tier 0 access operations.
• Identify opportunities to automate repetitive IAM operations using PowerShell and other supported tools.
• Follow security policies, access governance standards, and operational compliance requirements.

Required Technical Skills :

• Identity & Directory Services : Azure AD (Microsoft Entra ID), Active Directory.
• Identity and Access Management : User lifecycle management, access provisioning, de-provisioning, access reviews, and entitlement management.
• SSO & Authentication : Single Sign-On (SSO), Multi-Factor Authentication (MFA), authentication and authorization troubleshooting.
• Privileged Access Management : CyberArk administration and operational support.
• Identity Platform : Okta administration and troubleshooting.
• ITSM : ServiceNow incident, problem, and change management.
• Scripting : PowerShell for troubleshooting, administration, and operational automation.
• Documentation & Reporting : SOPs, knowledge-base management, incident reporting, and trend analysis.

Preferred Tools & Technologies :

• Semperis
• Veza – Identity Security Posture Management (ISPM) and entitlement management
• CrowdStrike
• Microsoft Defender

Experience Requirements :

• 5+ years of relevant experience in Identity & Access Management, identity operations, or directory services administration.
• Hands-on experience in L2 production support and incident management.
• Experience supporting enterprise IAM environments with Azure AD, Active Directory, Okta, and / or CyberArk.
• Understanding of 24x7 operational support, escalation management, and service restoration processes.
• Experience working with ITIL-based incident, problem, and change management processes.
• Ability to coordinate with L3 engineering teams, security teams, infrastructure teams, and external vendors.
• Strong analytical, troubleshooting, documentation, and communication skills.
• Good verbal and written English communication skills.

Preferred Certifications :

• Microsoft Certified: Identity and Access Administrator Associate (SC-300)
• Okta Certified Professional
• CyberArk Defender
• Agile Practitioner Certification

Ideal Candidate Profile :

The ideal candidate is a hands-on IAM operations professional with strong troubleshooting skills, experience handling L2 escalations, and the ability to coordinate operational activities across multiple teams. Candidates with practical experience in directory services, SSO/MFA, privileged access management, access lifecycle operations, and ServiceNow are preferred.

📢 We're Hiring | Cybersecurity Consultant | Gurugram

Role: Cybersecurity Consultant

Experience: 7+ Years

Location: Gurugram, Haryana

We are looking for experienced cybersecurity professionals with strong hands-on expertise in security operations, infrastructure security, vulnerability management and incident response.

🔹 Key Responsibilities

• Manage and strengthen security controls across enterprise IT infrastructure.
• Perform vulnerability assessments, remediation tracking and patch management.
• Monitor security alerts, investigate incidents and support threat hunting.
• Implement and manage SIEM, EDR and endpoint security solutions.
• Work on IAM controls, including MFA, SSO, RBAC and privileged access management.
• Support network security, including firewalls, IDS/IPS, segmentation and secure remote access.
• Assist with backup, recovery, disaster recovery and business continuity activities.
• Maintain security documentation, remediation evidence and audit compliance.

🔹 Required Skills

• 7+ years of relevant experience in cybersecurity, security engineering or security operations.
• Hands-on experience with SIEM tools such as Microsoft Sentinel, Splunk, QRadar or ArcSight.
• Knowledge of Microsoft security technologies, including Defender and Entra ID, is preferred.
• Experience with vulnerability management tools such as Tenable, Qualys or CrowdStrike Falcon.
• Strong understanding of incident response, threat hunting, network security and security remediation.
• Experience with EDR, IAM and enterprise security controls.

⭐ Preferred: OT/ICS security, IEC 62443, NIST frameworks, backup/DR and network segmentation experience.

📩 Interested candidates: Please share your updated cv at: snigdhaattheratebeanhr.com

Position: Manager – Information Security

Experience: 10+ years

Location: Gurgaon

Qualification: Bachelors in IT/Computer Science; Preferred: MBA, CISSP, CISM, CISA, ISO 27001/27701 Lead Auditor and Lead Implementor

Key Responsibilities:

• Lead the design, implementation, and continuous improvement of the enterprise-wide ISMS and PIMS programs.
• Develop and manage the InfoSec strategy aligned with business goals and regulatory requirements (ISO 27001:2022, ISO 27701:2019, DPDPA, IT Act, CERT-In).
• Oversee security risk assessments, audits, and remediation plans across IT and business units.
• Manage a team of security professionals; mentor, coach, and evaluate performance.
• Collaborate with Legal, Compliance, IT, and Business stakeholders to ensure security by design.
• Lead incident response, RCA, and post-mortem reviews.
• Drive security awareness and training programs across the organization.
• Manage security budgets, vendor relationships, and contract negotiations.

Technical Skills:

• Strong knowledge of IBM QRadar SIEM, GTB DLP, CyberArk PAM, Wiz CNAPP, Sentinel One EDR, Qualys VA and other PT tools.
• Experience in cloud security governance (Preferred on AWS and Azure; Good to have GCP).
• Experience of MITRE ATT&CK, NIST CSF, CIS Controls, OWASP Top 10.

mail updated resume with salary details-

email: etalenthire[at]gmail[dot]com

satish: 88 O2 74 97 43

Position: Manager – Information Security

Experience: 8+ years (with minimum 3 years in leadership roles)

Location: Gurgaon

Qualification: Bachelors in IT/Computer Science; Preferred: MBA, CISSP, CISM, CISA, ISO 27001/27701 Lead Auditor and Lead Implementor

Key Responsibilities:

? Lead the design, implementation, and continuous improvement of the enterprise-wide ISMS and PIMS programs.

? Develop and manage the InfoSec strategy aligned with business goals and regulatory requirements (ISO 27001:2022, ISO 27701:2019, DPDPA, IT Act, CERT-In).

? Oversee security risk assessments, audits, and remediation plans across IT and business units.

? Manage a team of security professionals; mentor, coach, and evaluate performance.

? Collaborate with Legal, Compliance, IT, and Business stakeholders to ensure security by design.

? Lead incident response, RCA, and post-mortem reviews.

? Drive security awareness and training programs across the organization.

? Manage security budgets, vendor relationships, and contract negotiations.

Technical Skills:

? Strong knowledge of IBM QRadar SIEM, GTB DLP, CyberArk PAM, Wiz CNAPP, Sentinel One EDR, Qualys VA and other PT tools.

? Experience in cloud security governance (Preferred on AWS and Azure; Good to have GCP).

? Experience of MITRE ATT&CK, NIST CSF, CIS Controls, OWASP Top 10.

mail updated resume with salary details-

email: etalenthire[at]gmail[dot]com

satish: 88O 27 49 743

website: www.glansolutions.com

Job description:

Job Description: Team Lead – Internal IT

Key Responsibilities

• Ensure uninterrupted day-to-day IT operations across end-user systems, network, and enterprise tools
• Lead IT support (L1/L2) to deliver timely resolution of user issues and service requests
• Oversee device management, access provisioning, and onboarding/offboarding processes
• Maintain IT security controls, patching, and compliance hygiene
• Manage incidents, perform root cause analysis, and implement preventive actions
• Coordinate with vendors and internal stakeholders to meet service expectations
• Maintain documentation and ensure proper knowledge transfer for transition

Required Experience & Skills

• 5–8 years of experience in internal IT infrastructure and support
• Hands-on experience with:
• End-user computing (Windows/Ubuntu/Mac management)
• Google Workspace
• Video Conference
• Support & Scheduling
• Networking and firewall managementCloud platforms (AWS/GCP)
• Identity & access management (AD, Google oAuth, SSO, MFA)
• Working knowledge of IT security and compliance practices
• Prior experience handling IT operations independently or in a lead role

About Solutionara

Solutionara is a U.S.-headquartered IT Consulting & Technology Services firm with a rapidly growing Global Delivery Center in Noida, India. We specialize in enterprise integration, data platforms, cloud engineering, and digital experience technologies. Our clients trust us to modernize their technology landscape, streamline operations, and build data-driven digital products.

At Solutionara, we operate with a builder mindset — high ownership, hands-on problem solving, and a culture where innovation is not a slogan but a standard. If you want to grow in an environment where your work contributes to real enterprise systems and digital platforms, you will thrive here.

Location: Noida, India (On-site – Global Delivery Center, Sector 62)

Experience: 6 – 10 years

Employment Type: Full-time

Role Summary

The IT Systems & Endpoint Lead will be responsible for managing and overseeing Solutionara's endpoint environment, user access, and core IT systems across cloud and on-premise infrastructure. This role combines hands-on system administration with operational ownership, ensuring endpoint compliance, identity governance, and reliable IT operations across the organization. The ideal candidate will act as a key operational anchor, driving stability, enforcing IT policies, and supporting a secure and scalable environment.

Key Responsibilities

Endpoint & Identity Ownership

• Own user identity and access management across Microsoft Entra ID and hybrid Active Directory
• Manage and enforce endpoint compliance using Microsoft Intune
• Ensure consistent enforcement of MFA, Conditional Access, and device policies
• Maintain role-based access control (RBAC) and support periodic access reviews

Infrastructure & Systems Management

• Oversee Windows Server environments and core infrastructure services
• Administer Microsoft 365 services (Exchange Online, Teams, SharePoint, OneDrive)
• Drive patch management, system health monitoring, and uptime reliability
• Identify and implement automation opportunities using PowerShell

IT Operations & Support Oversight

• Handle complex L2/L3 issues and provide escalation support
• Guide junior IT staff or vendors for L1/L2 support activities
• Oversee device provisioning, onboarding, and lifecycle management
• Ensure accurate asset tracking and IT documentation

Security & Compliance Execution

• Ensure enforcement of endpoint security policies (Defender, BitLocker, compliance baselines)
• Support Conditional Access, identity security, and policy enforcement
• Participate in audit readiness, compliance checks, and documentation
• Monitor risks and escalate security gaps proactively

Network & Access Coordination

• Oversee LAN, VPN, and Wi-Fi operations in coordination with network partners
• Maintain access control records, VLANs, and network documentation
• Troubleshoot and resolve advanced connectivity issues

Qualifications & Skills

Education & Experience

• Bachelor's degree in Computer Science, IT, or related field
• 6–10 years of experience in IT infrastructure, endpoint management, or system administration

Core Technical Skills

• Strong hands-on experience with Microsoft Entra ID, Intune, Windows Server, and Microsoft 365
• Experience managing endpoint compliance and identity access
• Solid understanding of Conditional Access, MFA, and access governance
• Good knowledge of networking fundamentals (LAN, VPN, firewall basics)
• Experience with ITSM tools (JIRA, ServiceNow)
• PowerShell scripting for automation and reporting

Preferred Skills

• Exposure to Microsoft Defender (Endpoint / O365)
• Understanding of basic security best practices and audit requirements
• Experience supporting compliance or audit activities

Certifications (Preferred)

• Microsoft Certified: Azure Administrator Associate (AZ-104)
• Microsoft Certified: Modern Desktop Administrator (MD-102)
• CompTIA Security+ / Network+
• ITIL Foundation

Soft Skills

• Strong ownership and accountability mindset
• Good communication and stakeholder coordination skills
• Ability to mentor junior team members
• Structured problem-solving and decision-making ability
• Ability to operate in a fast-paced, evolving environment

Job title Sox Compliance Officer

Reporting to Potentiam company background (The Employer) Potentiam is a global provider of highly qualified professionals to European SMEs from our offices in Romania, South Africa and India. Potentiam works with clients in finance, energy, leisure, marketing, business services and technology industries, providing technical, professional multi- lingual highly motivated staff, most of whom have had experience of working for international companies. Staff cover a wide range of roles from accounting, marketing, data management, HR, sales/account management, engineering, technology, and operations. Potentiam manages our staff’s career development and personal development training, all infrastructure, HR and payroll with our clients directly managing day-to-day staff responsibilities and role training and development. Company website - https://potentiam.co.uk/

Potentiam’s client: It is a leading provider of independent medical examinations, peer reviews, bill reviews, Medicare compliance, record retrieval, document management and related services. It provide IME services through their medical panel of credentialed physicians and allied medical professionals. Their independent medical review process is fully contained within their private cloud network. Custom portals, applications, workflow enhancements and systems integration are part and parcel of their service. Their clients include property and casualty insurance carriers, law firms, third-party claim administrators and government agencies that use independent services to confirm the veracity of claims by sick or injured individuals under automotive, disability, liability and workers' compensation insurance coverages. They help clients in the U.S., Canada, the United Kingdom and Australia manage costs and enhance their risk management processes by verifying the validity of claims, identifying fraud and providing fast, efficient and quality IME services.

Industry: legal, insurance, and healthcare services.

Purpose of role:

We are seeking a Compliance Officer to join our compliance team. This role is responsible for auditing IT control activities, ensuring adherence to Sarbanes Oxley (SOx) requirements, and maintaining governance standards. The ideal candidate will work closely with external auditors, perform Entity-Level Controls (ELCs), and document narratives, processes, and procedures in a fast paced environment. Potentiam | Job Specification 2 of 2

Duties and responsibilities: Compliance & Audit Activities • Audit IT control operations performed by IT Controls Analysts to ensure compliance with SOx requirements. • Perform walkthroughs and testing of ITGCs and ELCs to validate control design and operating effectiveness. • Develop, maintain, and update SOx narratives, process flows, and control documentation. • Coordinate and liaise with external auditors during SOx audits and provide requested evidence. • Identify control gaps and recommend remediation plans in collaboration with stakeholders. • Experience with ISO 27001 and NIST CSF, including understanding of information security controls, risk management, control assessments, compliance requirements, and security governance practices. • Familiarity with Cyber Essentials Plus (CE+) and related security/compliance requirements, along with knowledge or experience using Vanta or similar GRC/compliance management platforms, is a strong plus. Governance & Reporting • Prepare compliance reports and dashboards for management review. • Ensure timely completion of SOx testing cycles and documentation updates. • Support risk assessments and contribute to strengthening the overall control environment. Collaboration & Communication • Work closely with IT, Finance, and Compliance teams to align SOx requirements with business processes. • Act as a point of contact for external auditors and internal stakeholders. • Provide training and guidance on SOx compliance and control documentation standards.

Skills/Experience • Experience in SOx compliance, auditing, and governance processes. • Strong knowledge of Entity-Level Controls (ELCs), ITGCs, and SOx documentation standards. • Experience with ISO 27001 and NIST CSF, including security controls, risk assessment, and compliance. • Familiarity with CE+ and Vanta or similar GRC/compliance platforms is a strong plus. • Ability to create and maintain narratives, process flows, and control matrices. • Excellent communication and stakeholder management skills. • Detail-oriented with strong analytical and problem-solving capabilities. Why Join Us? • Opportunity to play a critical role in compliance and governance initiatives. • Collaborative team environment with exposure to senior leadership and external auditors. • Professional growth in a dynamic, fast-paced environment.

Additional benefits • Health Insurance • Referral Bonus • Performance Bonus • Flexible Working options

Location and hours Bangalore Office / UK hours

Read less

Job Summary

We are looking for an experienced GRC Technology & Transformation Lead to drive the delivery, implementation, and transformation of enterprise Governance, Risk, and Compliance (GRC) technology solutions. The role will partner with Risk, Compliance, Audit, and Technology stakeholders to modernize risk management processes through platform implementations, workflow automation, analytics, and AI-enabled solutions.

The ideal candidate will have a strong understanding of enterprise GRC frameworks, operational risk processes, and risk technology platforms, along with proven experience in technology delivery, stakeholder management, and large-scale transformation programmes.

Key Responsibilities

• Lead end-to-end delivery and transformation of enterprise GRC technology solutions supporting RCSA, Third-Party Risk Management (TPRM), Operational Risk, Controls, Compliance, and Corporate Risk functions.
• Drive implementation, configuration, enhancement, and optimization of enterprise risk technology platforms such as RSA Archer, ServiceNow GRC/IRM/TPRM, or equivalent platforms.
• Collaborate with Risk, Compliance, Internal Audit, and business stakeholders to understand requirements and translate them into scalable technology solutions.
• Define and execute technology roadmaps, platform strategies, and transformation initiatives aligned with enterprise risk and governance objectives.
• Lead workflow automation and process digitization initiatives to improve risk assessments, control monitoring, issue management, compliance tracking, and reporting.
• Identify opportunities to leverage AI/GenAI, analytics, and data-driven solutions to enhance risk management processes and operational efficiency.
• Oversee programme planning, delivery governance, resource management, risk mitigation, and continuous platform improvement.
• Manage global delivery teams and coordinate with business stakeholders, technology teams, system integrators, and external vendors.
• Establish delivery standards, performance metrics, governance mechanisms, and reporting frameworks to track programme outcomes.
• Ensure solutions align with enterprise architecture, information security, regulatory requirements, and internal governance standards.

Required Skills & Experience

• 12+ years of experience in technology delivery, enterprise GRC solutions, risk technology, or large-scale technology transformation.
• Strong understanding of Enterprise GRC, Operational Risk, RCSA, TPRM, controls management, compliance, and corporate risk processes.
• Experience with one or more enterprise risk technology platforms, such as:
• RSA Archer
• ServiceNow GRC / Integrated Risk Management (IRM) / TPRM
• Other enterprise GRC and risk management platforms
• Proven experience leading end-to-end technology implementations, platform enhancements, and transformation programmes.
• Strong understanding of workflow automation, process optimization, data management, analytics, and management reporting.
• Exposure to AI/GenAI-enabled solutions and automation initiatives is desirable.
• Excellent stakeholder management skills, with the ability to engage senior leaders across Risk, Compliance, Audit, and Technology.
• Experience managing cross-functional and global delivery teams, programme governance, and vendor relationships.
• Strong communication, problem-solving, strategic planning, and decision-making skills.

Preferred Qualifications

• Experience in banking, financial services, insurance, or other regulated industries.
• Exposure to regulatory risk management, audit management, controls testing, issue management, and enterprise risk reporting.
• Experience in GRC platform integration, data migration, reporting, and enterprise application modernization.
• Relevant certifications in RSA Archer, ServiceNow IRM/GRC, project/programme management, or risk management are an advantage.

Key Competencies

• Enterprise GRC Technology Strategy
• Technology Delivery & Programme Leadership
• Risk Platform Implementation and Optimization
• Stakeholder & Vendor Management
• Process Automation and Digital Transformation
• AI/GenAI and Analytics Enablement
• Global Team Leadership
• Governance, Controls and Continuous Improvement

Company Name: Money Honey Financial Services Pvt Ltd Company Profile: We are a one-stop financial services shop, widely known for quality of its advice, personalized service and cutting-edge technology. We started our journey in 2008. Currently we are serving more than 50,000 investors with a team of 100 members. Our core product offering is mutual fund, FD, Govt. Bonds, Debenture, etc. Role Description: This role directs the entire IT infrastructure, software engineering, and digital transformation strategy to support secure, scalable, and compliant technology and business operations.  

Skills and Experience Required:  15+ years in IT delivery, application development, and enterprise architecture, with leadership tenure in regulated financial environments.  Strong background in enterprise application architecture, cloud migrations (AWS/Azure/GCP), API integrations, and scalable database management using Microsoft and open source technology stack  AI / ML Strategy: identifying and implementing high-impact use cases for Generative AI, Agentic AI, predictive analytics, and process automation  Domain Expertise: Deep understanding of financial services (mutual fund, corporate fixed deposits, bonds etc.) and critical financial workflows  

Responsibilities:

  Strategic Technology Leadership: Define and execute the long-term technology vision, digital transformation roadmaps, and engineering strategies aligned with business growth.

  Application Development & Delivery: Oversee IT development functions, software product engineering, and core transaction platforms ensuring high availability and minimal downtime

 Infrastructure & Operations Management: Manage robust cloud and on premise infrastructure, network architecture, and 24/7 production support systems

 Governance, Risk & Compliance (GRC):Ensure adherence to ISO standards, regulatory frameworks, data privacy laws, and stringent cybersecurity standards Location: Goregaon (W), Ram Mandir road, Mumbai Work Model:

Work from office (all working days) 

TECHJAYS

Lead – Infrastructure Security & Release Operations

Position: Lead – Infrastructure Security & Release Operations

Experience: 8+ Years

Location: Coimbatore / Hybrid (Remote option available)

Joining: Immediate or within 30 days preferred

Core Focus: Production Release Management, Change Control, Security Operations, SOC 2 Compliance, Audit Evidence, Identity & Access Management.

Tools & Platforms: Octopus Deploy, TeamCity, AWS (IAM, Security Groups, CloudTrail), Status Page, Endpoint Security Tools, GRC Platforms (Vanta, Drata, or similar).

About the Role

We are looking for a senior, execution-focused professional to own production release management, change control, and day-to-day security and compliance operations.

This role focuses on ensuring production changes are deployed safely, maintaining accurate SOC 2 audit evidence, managing security operations, and enforcing disciplined access controls.

The ideal candidate will bring hands-on experience managing production deployment pipelines, coordinating change approvals, supporting external audits, and maintaining security and compliance processes in a production environment.

This is a hands-on execution role. Strategic roadmaps, architecture review boards, and cross-company leadership responsibilities remain with the existing leadership team and are outside the scope of this position.

Key Responsibilities

1. Production Release & Deployment Management

• Own production release and deployment pipelines using Octopus Deploy and TeamCity.
• Implement and maintain zero-downtime deployment practices and rollback procedures.
• Troubleshoot failed or stuck deployments and coordinate timely resolution.
• Approve production changes, hotfixes, and feature toggle changes.
• Coordinate maintenance windows and communicate planned changes to customers through the status page.

2. Security, Compliance & Audit Management

• Own SOC 2 change management processes and maintain complete, audit-ready evidence.
• Work directly with external auditors throughout SOC 2, HIPAA, PCI, or equivalent audit cycles.
• Track vulnerability remediation, security patches, and corrective actions.
• Manage endpoint security tooling and triage externally reported vulnerabilities.
• Support customer security questionnaires and security-related sections of RFPs.

3. Identity & Access Management

• Administer identity and access management processes, including access reviews and MFA enforcement.
• Manage privileged access controls and production access permissions.
• Grant, review, and revoke access to databases, VPNs, and deployment tools.
• Maintain appropriate access records and supporting compliance evidence.

4. Operational Support

• Manage infrastructure and access-related tickets requiring change approval or production access.
• Ensure production changes follow established approval and documentation procedures.
• Provide occasional on-call and after-hours support when required for production operations.
• Maintain clear documentation of releases, approvals, incidents, and security activities.

Must-Have Requirements

• 8+ years of overall infrastructure or release engineering experience.
• 5+ years of direct ownership of production release and deployment pipelines, including rollback procedures.
• 5+ years of ownership of SOC 2 or equivalent compliance change management and audit evidence processes.
• 5+ years of hands-on security operations experience.
• Practical experience administering IAM, including access reviews and privileged access controls.
• Experience supporting customer-facing security questionnaires and RFP security sections.
• Direct experience working with external auditors through at least one complete audit cycle.

Nice-to-Have Skills

• AWS security experience, particularly IAM, security groups, and CloudTrail.
• Familiarity with vulnerability disclosure platforms such as HackerOne or Bugcrowd.
• Experience coordinating third-party penetration tests.
• Familiarity with GRC and compliance platforms such as Vanta, Drata, or similar tools.
• Experience with customer trust and security review platforms such as Conveyor or CSA STAR.
• Previous experience working at a SaaS company serving regulated industries.

What We're Looking For

• Strong ownership: Takes responsibility for production releases, security operations, and compliance evidence.
• Sound judgment: Willing to stop or reject a production change that does not meet the required standards and explain the decision clearly.
• Incident management: Maintains a calm, structured approach when deployments fail or production incidents occur.
• Clear communication: Communicates effectively with engineering teams, external auditors, and customer security stakeholders.
• Attention to detail: Maintains accurate documentation, access records, approvals, and audit evidence.
• Execution-focused mindset: Comfortable managing day-to-day operational responsibilities without relying on strategic leadership duties.

What We Offer

• Flexible work environment with Coimbatore office, hybrid, and remote options.
• Paid holidays and flexible time off.
• Medical insurance coverage of up to ₹4 lakh per person for self and family.
• Opportunities to support production infrastructure and security operations for global clients.
• A culture that values clarity, integrity, accountability, and continuous growth.